Aws Iot Device Defender

It gives you the ability to enforce consistent security policies across your aws iot device fleet and respond quickly when devices are compromised.

Aws iot device defender.

Aws iot device defender is a security service that allows you to audit the configuration of your devices monitor connected devices to detect abnormal behavior and mitigate security risks. Aws iot device defender detects unusual device behaviors that may be indicative of a compromise by continuously monitoring high value security metrics from the device and aws iot core e g the number of listening tcp ports on your devices or authorization failure counts. Aws iot device defender audits iot configurations associated with your devices against a set of defined iot security best practices so you know exactly where you have security gaps. You are billed separately for the audit and detect features.

An agent on each device is responsible for collecting device metrics and sending them to device defender. Devices can send metrics at 5 minute to 48 hour intervals. Audit monitors your device related policies certificates and other resources to ensure that the proper security configuration is in place. Aws iot device defender is an aws iot service that enables you to monitor connected devices to detect abnormal behavior and to mitigate security risks.

You can run audits on a continuous or ad hoc basis. Aws iot device defender comes with security best practices that you can select and run as part of the audit.